Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1IYhMM_7p4oSx6OFjD7QddYa7vM.roa
File: 1IYhMM_7p4oSx6OFjD7QddYa7vM.roa (raw, json)
Hash identifier: FwEAXe2oxx0pK1zyOZBWvNC7bUO3O1Jaow4bKCSwzpE=
Subject key identifier: D4:86:21:30:CF:FB:A7:8A:12:C7:A3:85:8C:3E:D0:75:D6:1A:EE:F3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CE30F6D70F41A696B53F93B91A80D5263
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1IYhMM_7p4oSx6OFjD7QddYa7vM.roa
Signing time: Sun 07 Jan 2024 08:34:48 +0000
ROA not before: Sun 07 Jan 2024 08:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.106.84.0/24 maxlen: 24
91.200.221.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 18:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:0f:6d:70:f4:1a:69:6b:53:f9:3b:91:a8:0d:52:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 7 08:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4862130cffba78a12c7a3858c3ed075d61aeef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:38:2a:f1:b6:77:bd:0b:63:55:4f:f1:9f:
d6:c7:27:b8:9b:81:3a:e0:4e:ab:ad:cd:c2:22:27:
dc:41:7d:58:72:dc:00:ba:2d:8c:23:e8:13:3a:d2:
72:f8:a0:78:a0:db:db:39:8a:48:fe:81:dd:1e:bd:
8b:1e:bf:e2:1f:81:4a:f2:19:46:85:33:5b:74:07:
bd:3e:63:7a:86:ee:e9:d2:4f:00:47:bd:6d:7d:70:
48:d1:4c:80:bb:63:12:51:cd:e9:47:dc:0c:8d:24:
d1:d4:d6:b8:05:a0:03:63:01:a1:85:79:59:a5:8a:
b6:9b:3d:d6:af:c4:a6:5e:5d:3c:77:76:49:bf:4e:
e1:bf:1a:aa:65:99:16:3e:f8:c6:3f:01:88:4e:45:
d5:bd:96:b5:f6:2f:b7:d8:94:a4:03:26:a6:8b:45:
5f:06:ff:b3:4a:f8:ff:38:47:bb:75:b6:be:7b:c8:
b0:ab:ca:ac:09:f5:4d:b8:3e:d0:39:3e:fa:b0:6c:
ea:a6:bf:be:7e:d1:99:2b:cc:35:03:6b:89:31:34:
9d:82:0f:04:8c:45:e1:29:06:83:ba:8b:69:aa:b1:
45:87:fd:82:b5:80:89:df:ee:da:4d:f5:30:e7:71:
3b:d0:04:49:82:c1:df:4a:49:5d:f4:65:ab:5e:3e:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:86:21:30:CF:FB:A7:8A:12:C7:A3:85:8C:3E:D0:75:D6:1A:EE:F3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1IYhMM_7p4oSx6OFjD7QddYa7vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
91.200.221.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c8:52:3f:d1:6c:84:a7:ee:39:11:15:92:3f:90:5f:90:f0:
3a:a3:f9:26:92:f5:ba:35:ef:1d:4e:43:0c:ce:dd:54:80:b9:
62:74:2b:1d:b5:0f:13:2a:0d:95:fa:6c:a8:12:8c:44:73:1f:
6b:43:2e:29:cd:b2:54:f3:6d:ed:a5:6d:85:d6:45:82:b2:de:
2e:a5:6c:be:38:ce:6d:f7:c3:da:9d:87:b2:08:76:ff:a9:ad:
ce:57:14:20:66:8a:25:57:4b:11:64:02:82:fc:e5:63:eb:90:
16:0f:98:5a:02:eb:6d:da:dd:23:3d:dc:27:07:e5:18:ca:23:
61:05:d2:99:9d:a5:b6:e9:77:e4:ef:0d:90:83:67:c1:c2:fc:
22:d2:22:77:99:5e:e5:69:e8:66:75:8d:7f:ea:a2:e1:63:9b:
68:2e:57:86:97:28:1b:8e:48:22:5d:f8:6b:cc:c6:b9:a8:e0:
67:74:49:df:d0:db:22:4c:c0:70:0c:56:27:00:4e:61:73:a3:
05:75:85:a4:5d:cc:ab:9a:5e:a9:3f:6f:94:bd:38:8e:5a:c3:
23:86:97:3e:5b:4a:f6:05:57:23:9f:7b:c6:a6:92:15:2b:92:
01:50:96:64:fd:4b:76:89:82:de:ef:e3:0c:12:34:81:31:72:
8a:8a:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org